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ABSTRACT OF THE DISCLOSURE 

A system for granting group permissions to 
specific resources to users in online communities such as 
the Internet. 
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TITLE : CONTROLLED ACCESS SYSTEM FOR O NLINE COMMnMTTTRg 



FIELD QF TPffi flWWIQN 
5 The present invention relates to a system for 

managing group permissions to dynamically created and 
shared resources in online communities/ using open 
standards for email and the World Wide Web, in particular, 
over the Internet or intranets with such applications as 
10 online photo communities. 



BACKGROUND OF THE INVENTION 

Although widely used and understood concepts of 

15 network resource management of traditional resources of 

file and print servers using protocols such as "samba" and 
Sun Microsystem's "NFS" (network file system) have met 
demands of traditional network users, new challenges of 
typically Internet-based online communities require a 

20 different approach to resource administration. 

Traditionally, the formation of groups and 
allocation of network resource access permissions has been 
done centrally by a relatively small set of specially 

25 trained administrators who typically define only a handful 
of relatively static groups (or classes of users) using 
minimal automation. To be able to centrally create such 
groups, administrators must be given "total knowledge" of 
the system - including a detailed list of all users with 

30 which to create such groups and a list of all network 

resources. This use of groups to categorize users to give 
fairly standardized permissions for file access, update and 
deletion as well as printer control greatly simplified 
administration of such traditional network resources. 



35 



With online communities, there tends to be not 
hundreds to thousands of users, but tens of thousands to 
millions of users. These users wish to create many 



- 1 - 



WH-11,109CA 



CA 02335395 2001-02-09 



impromptu groups with small or large numbers of members 
each. Groups may last for hours, days, weeks or even years 
and would come together to share folders of documents, 
selected information, photo albums, message lists, or other 
5 data. Ideally, to allow these groups to form, each user 
would become a "mini-administrator" that can add access to 
others for their own or group content. 

One current example of an online community faced 

10 with these challenges is that of ICQ (short for "I seek 

you"). With ICQ, the online community is formed around the 
idea of each user having a group of friends that they 
monitor information about. Effectively the resource is the 
ability to send messages to other selected ICQ members. To 

15 enroll new members in your group of contacts (and similarly 
in their group of contacts), the ICQ system follows one of 
three strategies: (i) publishing your ICQ member ID on a 
business card or web site so that others will be able to 
identify you; (ii) emailing an invitation to join which 

20 contains your ICQ ID; or (iii) searching a public directory 
to find the ICQ ID someone you wish to contact. The 
ultimate process in all three strategies requires that your 
ICQ number is received by the prospective member of your 
group. Then they enter that in their ICQ contact list, and 

25 you are asked to verify their admission. 

In order to allow ad hoc groups to form and 
share specific information, it is apparent that the current 
state of the art for traditional network management is to 

30 either distribute the owner's account and password and 

therefore all permissions for a given shared resource to a 
target group, or to create resources freely accessed by all 
users. For online communities, the state of the art in 
true ad hoc group creation is to publicly publish all 

35 users* contact information such that anyone can request 

entry into a group. Alternatively, such sites publish the 
content to the Internet world at large. 
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It is clear that neither the approaches used in 
traditional network management, nor those currently 
deployed by online communities, effectively bridge the gap 
for ad hoc group creation between centrally managed secure 
5 resource access and unsecured open access. 



SUMMARY OF THE INVENTION 

The invention defines a system permitting many 

10 non- trusted administrators, with minimal knowledge of other 
system users, to securely create ad hoc groups from both 
existing system users and those previously outside the 
system and manage corresponding resource permissions for 
such groups and in some cases, for individuals within such 

15 groups. 



The system identifies four main components: a 
resource, the owner (or owners) of the resource, an 
existing member user and a non-member user. 

20 

In the simplest case, the owner of a resource 
selects the level of access for the new group when it is 
created. The owner then requests the system to generate an 
appropriate sign-up URL (as defined below) to be sent to 

25 the email addresses of the prospective member and non- 
member users. Each user receives the sign-up URL in email. 
The user then clicks on the sign-up URL which links to one 
of two corresponding web pages. For members, they are 
asked to login. On successful login, the database is 

30 updated with their group membership activated. For non- 
members, they are asked to sign up and then they are added 
to the group membership. The user is granted the group 
permissions offered by the owner. 

35 There are a number of possible different 

refinements to the above process, depending on the demands 
of the ad hoc group which may determine the composition and 
thus corresponding behavior of the sign-up URL. In the 
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list below, examples are provided to illustrate both the 
breadth and scope of possible uses for such sign-up URL's. 

1) The sign-up URL in the simplest case only 
contains a coded reference to the group that the 

5 prospective member (or non-member) has been invited to 
join. For example, a photographer might have a group of 
albums of professional work targeted at different 
audiences with certain photographs appearing in multiple 
albums. In this case, the photographer would classify his 
10 clients into groups according to their tastes and only 
invite each client into one group containing related 
albums . 

2) The sign-up URL might include coded references 
15 to multiple group invitations. It is conceivable, for 

instance, that a real-estate agent might create a resource 
(an album typically) for each property being offered. 
These albums would then be offered to selected groups (for 
example, the agent might have the "Bass Lake Cottage Group" 

20 and the "Pine Lake Cottage Group" and the "Sunset City 

Group" - if the agent listed a cottage near both Bass and 
Pine Lakes, it's album might be included in both groups) . 
Likewise, prospective clients might be invited to view a 
set of such resources by receiving a sign-up URL 

25 automatically placing such client into the "groups" for 
properties that the agent feels the client will have an 
interest . 

3) The sign-up URL may include a time expiry 

30 embedded. For example, maybe the group will only accept 
new members for a given period - perhaps it's a "you must 
act fast" promotional scenario. 

4) The sign-up URL may include a unique identifier 
35 which prevents its use more than once, thus preventing an 

invitee from forwarding the URL to other uninvited parties. 
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5) The sign-up URL may include encoded information 
about the prospective group member it has been emailed to 
which would prevent others from using it to logon and 
register for a group. 

5 

6) The sign-up URL may include a code to notify the 
resource owner when it is used by a prospective member. It 
might also be coded to inform the resource owner who used 
it to be added to the group. 

10 

7) The sign-up URL may include a code to check, 
before confirming registration of a prospective member, 
that the invitation to join a group has not been retracted 
by the resource owner. 

15 

8) The sign-up URL may include a code to grant the 
prospective member of a group special access to the 
resource beyond that given to most members of the group - 
or to provide more restrictive access than that given to 

20 mo s t members . 

In any of the above cases, it can readily be 
seen that any of the materials encoded within the sign-up 
URL may be replaced with a unique identifier (a "pointer") 

25 referencing a database table entry where the actual 

variable data might be stored. In this case, when the 
prospective member clicks on the URL, the server makes a 
database lookup based on the pointer encoded into the URL 
to ascertain the desired action based on fields in the 

30 database. 

In accordance with one embodiment of the present 
invention, a unique internet photo sharing community may be 
constructed. The process of sharing albums (the resource) 
35 in traditional photo sharing communities is cumbersome for 
a number of reasons: 
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1) The owner of a set of pictures typically creates 
an album and must assign a password. The owner has a 
significant task in managing album names and passwords 
since each album must have a different password unless 

5 he/she wishes previous invitees to simply have access to 
all his/her albums. 

2) The owner then emails the album name and 
password to friends. Each and every time he/she has a new 
album to share, and invitation must go out with the album 

10 name and password - a laborious task. 

3) Friends receive this email and must manually 
note the name of the album and password on a piece of paper 
or some other list they keep with their computer as there 
is no way to access all albums they have been invited to 

15 (likely from many different people) with one password or 

even see all their invited album names in one short list on 
the photosharing site. 

4) The owner of the album has no knowledge if their 
invitees accept their invitations or even if anyone has 

20 looked at the album. 

5) There is also no way that the owner of the album 
can control who receives the invitation as it may be 
forwarded without the owners knowledge - and anyone with 
the album name and password may access the album. 

25 6) There is no way for the owner of an album to 

retract an invitation. Say, for example that someone was 
posting rude remarks against certain photos within the 
album. Although the album owner would see the username of 
the individual, there would be no way to restrict such 

30 person without changing the password to the album and thus 
having to inconvenience everyone else. 



These factors are severely restricting the 
success of traditional photosharing sites and are addressed 
35 in the following steps defining one embodiment of the 
present invention: 
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1) In this invention, a member of a photosharing 
community can create named groups of people by adding 
individuals email addresses or userids to the group. The 
system would automatically match email addresses with 

5 existing userids. 

2) The member then gives access to one or more 
albums to each group and sends an email containing the 
invitation URL to the group. 

3) On receipt of the URL, each invited member is 

10 given an option to accept membership in the group and thus 
access to group albums. The URL may only be used by those 
to whom it is addressed. 

4) Invited members use their own password to access 
shared albums and see a list of all their personal albums 

15 and any shared albums at their will. Thus, each member of 
the photo sharing community has only one password to 
remember, and only one location to check to see a list of 
albums and groups. 

5) The owner of the group may retract access by any 
20 invited member. The owner can also see if invited members 

have accepted the invitation and may re-invite users. 

6) The owner of a group may offer extended access 
to any member, this allows for multiple group members to be 
able to upload images for example. 

25 7) From time to time, new albums may be added to, 

and older albums may be removed from, the group access. 
Each time a group member checks his/her group albums, the 
new albums will automatically appear - no notice from the 
group owner is required unless requested by group members. 

30 

Comparing the effectiveness of the above with 
the traditional photo sharing site is illustrative: A ski 
club, for example, could add all its members to a group on 
the photo sharing site, ensuring that the membership 
35 secretary dynamically added and removed members throughout 
the season (new members would get invitations to the 
group) . 'Each ski team would then post one or more albums 
throughout the season as "team captains" would have album 
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create access within the group. Members would then have 
access to these albums on a virtually instantaneous basis 
just by checking albums posted to their Ski Club group. 
With the traditional photo sharing sites, constant emails 
5 would have to go out each time a new album was posted and 
such emails would have to contain the album name and 
password. If multiple "team captains" were posting albums, 
each would have to know all the email addresses of all 
members of the club. If club membership changed, all these 

10 email lists would have to be continually updated. No 

common "Ski Club" group would exist where all club albums 
could be found by members. Essentially, the administration 
of the ski club photosharing would become a batch process 
versus the truly dynamic, spontaneous process possible 

15 under the invention herein. 



BRIEF DESCRIPTION QF THE DRAWING? 

Preferred embodiments of the invention are shown in 
20 the drawings, wherein: 

Fig. 1 is a topological view of a traditional 
file sharing system; 

Fig. 2 is a topological view of the ICQ member 

system; 

25 Fig. 3 is a topological view of the online photo 

community; 

Fig. 4 is a state diagram of a trusted 
administrator group system; 

Fig. 5 is a state diagram of the ICQ member 
30 system; Fig. 6 is a state diagram of the online photo 
community 

Fig. 7 is an example login screen for a member 
" dissident w ; 

Fig. 8 is a screen showing the groups of the 
35 member "dissident"; 

Fig. 9 is a screen showing how to create a 

group; 
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Fig. 10 is a screen showing how people are 
invited to join a group; 

Fig. 11 is a screen showing the new group 
"sample group" and the albums shared therewith; 
5 Fig. 12 is a screen providing feedback with 

respect to invitations sent by e-mail to individuals; 

Fig. 13 shows an e-mail invitation received by 
the non member dmwick; 

Fig. 14 is an initial screen used when dmwick 
10 uses the URL contained in the e-mail; 

Fig. 15 is a screen allowing dmwick to set up an 
account as a new member; 

Fig. 16 is a screen allowing the new member to 
view the albums available to him, namely; his own first 
15 album and the shared albums of sample group "dissident"; 

Fig. 17 is a screen showing details of the 
sample group/dissident when actuated; 

Fig. 18 is a message to the member "dissident" 
that the new member "patent" has accepted his invitation; 
20 Fig. 19 is a status screen allowing the member 

"dissident" to overview the status of his group "sample 
group " ; and 

Fig. 20 is a screen allowing removal of members 
from a group. 

DETAILED DESCRIPTI ON OF THE PREFERRED EMBODIMENTS 

Figure 1 shows a traditional prior art file 
sharing scheme over a Local Area Network or Wide Area 
30 Network 3. There can be multiple file servers 4 connected 
to a central login server 5 who share files on a per user 2 
basis. The Site Administrator 1 controls who has access to 
what resources . 

35 Figure 2 shows a similar prior art arrangement 

for the ICQ™ online chat community, based over the 
Internet or intranet 23 instead of a LAN or WAN 3 of Figure 
1. Instead of a file server 4 there is an ICQ Server 24 
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and there is a Member Database 25 instead of Login Server 
5. Both file server 4 and ICQ server 24 represent the 
resource. Both login serve 5 and database 25 holds the 
user profile with the list of the groups that each user is 
5 a member of. With figure 2, an individual member 21 who 
wants to invite a new member 22 to his or her contact list. 
The contact list can be viewed as a group that the invitee 
belongs to in the same way that a user 2 of Figure 1 can 
belong to a number of groups. 

10 

Figure 3 shows the online photo community 
topology according to the present invention. The Resource 
Owner 3 becomes equivalent to the ICQ Invitor 21. The 
invitee 22 of Figure 2 is equivalent to a Non-member User 
15 32 or Member User 33 of Figure 3. The network (internet or 
intranet) is 34. The database server 37 corresponds to the 
ICQ member server 25. 

Figure 4 shows the administration state diagram. 

20 The Start 4 is followed by a log in 42 central state. From 
here the trusted administrator can create or destroy user 
and groups 43, 44, 45 and 46 as well as set the group for 
each resource 50 and change the permission on a resource 
51, Finally to work with groups, the administrator needs 

25 to move from state 42 to 47, selecting a particular group 
to work on. From state 47, the administrator can add users 
48 or remove users 49. Because the administrator is 
trusted, these actions happen without confirmation. 

30 Figure 5 shows the ICQ contact sign up scheme 

for the case where the potential contact is not in a 
publicly listed directory. In states 53, 54 and 55 the 
invitor is in control. The invitation is created in 55 and 
is emailed in 56 by the ICQ server or other email system. 

35 From step 57 to 58 the invitee takes over. In step 59 the 
ICQ number is copied into their client software, and the 
normal conformation steps take place. 
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In figure 6 we see the states involved in the 
online photo community. The diagram starts at state 61. 
First, the Resource Owner logs in at State 62 (for example 
the owner of photos in the online community logs in) . This 
5 is similar to State 42 of Figure 4. From here the resource 
owner has access to the groups created by him or her. That 
list of groups can be maintained using states 65 and 66. 

Also State 70 and 71 allow resource permissions 
10 and group access to be altered. Again, the resources are 

limited to owned resources, unlike 50 and 51 of Figure 4. 

In a file system the resources are typically files and the 

permissions are reading, writing, executing, and deleting. 

With an online photo sharing community, the permissions 
15 allow for reprints, cropping, annotation, image processing, 

reusing in a collague or total reuse permission. 

Finally a group is selected in state 67. In 69, 
the owner is then able to remove users from the group in a 
20 manner similar to state 49. At state 68, the owner invites 
a user to the group. 

The method followed from state 68 involved 
sending a special URL which is created at state 63 and 

25 simplifies joining of the group. This URL contains a 

unique identifier plus some randomness for security. This 
allows for a number of options for encoding the email 
address of the prospective user or a serial number that 
links back to a database. The cookie can either be set to 

30 expire or be unique to a particular email address or member 
user's account. In state 64 the cookie can be recorded in 
the server side database and a potential expiry date can be 
recorded. 

35 Then at State 72, the URL is sent by email 

denoted by the line between 72 and 73, and the Resource 
Owner is returned to State 67. 
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At state 73 a member or non-member user receives 
an email containing a URL with a special cookie. Members 
follow the path 74 to 7 5 to become logged in, whereas Non- 
members follow the path 76 to 77 to log in. In either case 
5 the cookie is retained by the web browser through these 
sign up or log in procedures. Members could be optionally 
auto logged in via a log in cookie. Non-members could be 
allowed special viewing privileges without joining as a 
member. In any case, the group joining cookie is carried 
10 through to the server in State 78 where the member is 
automatically added to the group. 

The system and method of the present application 
allows a web server to be configured to allow a host of 

15 users to become separate group administrators where each 
administrator is associated with at least one common 
resource that he wishes to make available to users of his 
choice. The web server is designed such that the group 
administrator can log in and is directed through a series 

20 of web pages (shown as Figure 7 through 20) to invite new 
users of his choice to join the group and to also allow 
this group administrator to set different privilege levels 
with respect to each invited user. 

25 A database associated with the web server records 

the particulars of users and invited users in the database 
associated with a URL which is provided to the users and 
which is customized to allow the database to know the 
privilege level. The group administrator can modify his 

30 common resource and extend the content thereof, making it 
available to all members of the group without changing the 
relationship with the various users of his group. 

Users contact the web server using the URL and 
35 merely complete a login procedure with a common password 
protection preferrably being present (Fig. 7). This is 
basically a single security step to provide access to the 
web server with the authorization associated with the 
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common resource being maintained with the database. In 
this way, the group administrator can increase and/or limit 
the access a user has and the privileges that the user has. 
With this arrangement, the web server allows the group 
5 administrator to effectively preauthorize users which he 
has decided to invite to his group and preferrably, the URL 
which is provided to the user includes in part thereof, a 
code which is used by the web server to determine the 
privileges and common resources that the user has access 
10 to. 

Both the group administrator and the various users 
access the web server and full control for the common 
resource of the group administrator lies with the group 

15 administrator and does not require interaction with 

personnel associated with the web server. Basically, the 
web server has been configured to provide this control to 
the group administrator and also allows this group 
administrator in a simple way, to invite users to share his 

20 particular common resource and to simplify the interaction 
by the group administrator with the web server, as well as 
the individual users with the web server. 

This system and method has particular application 
25 with respect to digital photography and the storing of 
digital photo albums or digital photo content on a web 
server where a particular group administrator controls 
access to his particular digital content. Access to the 
particular group administrator's common resource is 
30 controlled to whatever degree that the group administrator 
wishes. If a high degree of control is desired, the group 
administrator can have the web server create a unique URL 
for each possible user of that resource and the different 
privilege levels for that particular user can be maintained 
35 in a database associated with the web server and the 

particular URL. In other cases, unrestricted browsing can 
be possible. 
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With respect to the specific example of 
photographic digital data, different privileges could 
include browsing of the content to selection, printing of 
certain portions of the data to editing and/or forwarding 
5 to other parties. These privileges can be modified by the 
group administrator and the system also allows the group 
administrator to set a certain time period during which 
access is allowed. For example, the URL could expire at a 
particular point in time and if the previously authorized 

10 user tries to access the common resource after the expiry 
time period, the database will recognize that this URL has 
expired and deny access. This system allows a very 
flexible approach where basically unskilled group 
administrators can form and provide information to users of 

15 their choice with a degree of security that they have 
selected or accepted. 

The system is easy to use for the group 
administrator as well as for individuals who have been 
20 invited to join a group as the web server basically uses 

the URL to simplify contact and control the privileges of a 
user in accordance with information determined by the group 
administrator . 

25 The above system has particular application with 

respect to digital photography, however, it is certainly 
not limited to this application. Basically, the system 
allows simplified control access and management of a 
database of the group administrator. This arrangement 

30 allows many unrelated group administrators to store their 
information on a web server and limit access to their 
information to users which they have effectively 
preauthorized. The web server can host many unrelated 
common resources and have many different group 

35 administrators who are all unrelated. Such a centralized 
system can be extremely cost effective while still 
providing the individual group administrators with full 
control and flexibility with respect to expansion of their 
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information, and expansion of their users and the various 
privilege levels and number of privileges available to 
their users. 

5 Thus this system is cost effective as many 

different users have access to a system which on a single 
or small user base would not be cost effective. 

Fig. 7 shows the login screen 100 for the user 
10 dissident. This user has entered their password and has 
opened the screen 102 shown in Fig. 8. The member 
dissident has then opened using the navigation control on 
the left hand side "my groups" to move to the screen shown 
in Fig. 9. 

15 

Fig. 9 shows the navigation bar 104 and the member 
actuates the control "create group". This produces the 
screen 106 where the dissident in this case will name the 
group "sample group". 

20 

In Fig. 10, various members are added to this new 
group as shown in screen 108 where two people are being 
invited to the group, namely; dmwick at a certain e-mail 
address, and stevel who would be a member of PIXBANK. 

25 

Fig. 11 shows a status screen 110 stating that the 
group "sample group" has no members and also shows what 
albums are available to be shared by this group. There is 
also a report that this group has two pending invitations. 
30 By actuating control 112, the user moves to screen 114 

shown in Fig. 12. The two pending invitees are listed and 
certain management controls are possible. 

Fig. 13 shows an e-mail which has now been received 
35 by the non member dmwick. Within the e-mail, is the URL 
116 which provides a simple means for the invitee to 
respond to the invitation. Actuation of the URL will take 
him to the website and take him to the login screen. 
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The login screen is shown in Fig. 14 as 118. 
Instructions are provided allowing login based on a new 
member or login based on an existing member. 

5 

Screen 120 of Fig. 15 shows the login procedure for 
the new member dmwick. As can be seen, the new member 
enters a password of his choice at 122 and basically, this 
is the only information he is required to remember. The 
10 URL which he used has already registered certain 

information which he is entitled to share. In addition, as 
a member, he can store his own digital records on the site, 
and also proceed with his own group, if he so wishes. 

15 After the login at Fig. 15, the new member dmwick 

is taken to the screen 124 of Fig. 16 and decides to look 
at the sample group that he has been invited to join. This 
then takes him to the shared albums of the sample 
group /dissident shown as 126 in Fig. 17. He can then 

20 review any of those albums according to whatever privileges 
have been assigned to the original administrator. 

Fig. 18 shows a system which is provided back to 
the owner of the sample group. In this case, the member 
25 patent is the name that was entered by the invitee who 
received the e-mail address to dmwick. 

Fig. 19 is a further status screen 130 which has 
been accessed by the member dissident and shows that the 
30 new member patent has entered the group and the group has 
one pending invitation. Screen 132 of Fig. 20 is another 
administrative screen which allows the administrator 
dissident to remove certain members from his group. 

35 As can be seen, the system is quite intuitive and 

allows a user to quickly become familiar with the system. 
It also allows each user to become a group administrator 
and thereby further extend the number of users to the 
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system. In this way, the number of users of the system can 
greatly expand as each member has the easy capability of 
forming a group and inviting both members and non members 
to join his newly formed group. 
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Fig. 1: Topological view of a traditional file sharing system 
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Fig. 2: Topological view of the ICQ member system 
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Fig. 3: Topological view of the online photo community 
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Fig. 4: State diagram of a trusted administrator group system 
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Fig. 5: State diagram of the ICQ member system 




Pnor Arir 



CA 02335395 2001-02-09 



Fig. 6: State diagram of the online photo community 
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Member "dissident" logs in: 



Member Login 

User narnR: 



■dissident 



Password: 




pi <s-i 



Member "dissident" chooses My Groups from the navigation bar: 




^2?iBANK" A ^YourExpressiorf>9 



greetings inc. 



Upload ^ Pnoto Gallery 



AboulUs ConlaclUs ^ LogOul ~ x Help 



J 

Hems: 0 

Price: CON SO.OQ 



OMy Albums 
O My Groups 
O Preferences 



Search 



Visit a User 

UftntirM or E-mail 




Album j? ■; First Album jii) 



Album 



heHo (0) 



Album 



; Jim's your uncle. (1) 

! These are photos from my 
S Dad's birthday party at Keith's. 



FIG'S 



Album 



Random (6) 
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Member "dissident" chooses create group: 




Member "dissident" names the group "sample group": 

Create a New 
Group 

Name: I. _ ! 



Member "dissident" adds new members: 



IOH 




Add Members to Group: 

| sample group jjjj 



You can enter e-mail addresses or pixBANK usernames in the following fields. We 
will send e-mail to each of these people to invite them to join your group. Please 
double-check all of your addresses . Where possible , it i s better to use the person's 

pixBANK usemame. 

|dmwick@exctte.ct | - — 



jsteyel 



r 



r 



T 



if 



IZ 



Note that both members who have signed up previously and non-members can be invited. 

F16- 1° 
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Th e site emails off invitations. The group shows that there are 2 pend ing group members: 

I sample group J 




Group Members ' 


Shared Albums i 


Group "sample group" has no members. 
Invite New Members 


F First Album 
F hello 

F Jim's your uncle. 
F Random 
F Travels 









I/O 



This group has 2 pending invitations 



Manaoe Invitations 



FIG. // 



1 1 "2- 



To see which members have not yet joined, Manage Inivtations can display pending invitations and allow for 
re-requesting or blocking members that wercnt requested: 



Manage Group 
Invitations 



r dmwick@excite.com 
n Steves 



F l <S - • 



Page 3 from 9 



CA 02335395 2001-02-09 



Now non-member dmwick@eKcite.com receives an email: 
Date: Thu, 08 Feb 2Q01 1 1 :37:44 PST 
From: "www-data" <wwwdata@op8ngraphics.com> [Add to 
To: dmwick@excite.com 
Subject: pixBANK Group Invitation 

The pixBANK member 'dissident' has invited you to join one of 
his/her photo sharing groups. If you would like to join this 
group, please click on the following URL 



http;/^^ni9 t pixbgpK I ponVig I php3?frt=l63 M 3c74bgc ^ 

If you are not interested, please just ignore this e-mail. 

Thank you, 

The pixBANK Robot 

P.S. pixBANK is a website that facilitates on-line storage, 
sharing and professional-quality printing of your home photos. 
Please feel free to visit our site at http://demo. pixbank.com/ 
if this service interests you. 




FIG. 13 
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Non-member dmwick@excite.com clicks on the link: 




j 

Items: 0 

Price: CON JO.00 



OMy Aibunns 
O My Groups 
o Preferences 

Search 



Visit a User 
Jstmima or E-miH 



User 'dissident* has Invited you to Join his/her "sample 
group 1 photo-sharing group. 

• If you are already a pixBANK member, you can join the group by 
logging in right now. 

• If you are not yet a member, please sign up for a free membership. 
Your new account will automatically be added to the group. 



r\6 • »f 
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If the users had an existing users account but registered under a different email address, then the Log In 
option would make sense. But this user needs to create an account via Sign Up: 
New User Information 



Usemame: |patent 



E-mail Address: |dmwtck@excite.corn 

Password: ' 

Re-type password: 

n Send me periodic pixBANK updates, 
r Send system messages by e-mail. 

BBM Privacy Policy I Terms of Use 




F 16 . & 
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The non-member dmwick® excitcxom becomes member "patent". Member "patent" views the list of 
available albums and finds the^haied albums from dissident available: 



'j£tBANK 

' V. . 

j 

items: 0 

Price: CON 10.00 



O My Albums 
O My Groups 
o Preferences 

Search 



Visit a User 

Unmimt ot E-mail 



4 1 VI qp^oiiGraphics: 

\\^ '/O Professional Graphics Made 




SearchJ M Public Images £J| All Categories glf 
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Member "patent" can access and use the albums that belong to the group called "sample group" owned by 
member "dissident" 




pig. n 

Now that member "patent" has joined the group, member "dissident" sees a system message: 




By choosing to view the system message, member "dissident" learns who has joined his or her group: 



System Messages 


r 


patent has 
joined your 
group 


The pixBANK member 'patent 1 has accepted your invitation to join the 
group 'sample group'. They should now be able to view photos in any of 
this group's shared albums. 


Feb 08 
2001 




■ 
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Member "dissident" now sees the new member in the group listing: 




Group Members 


Shared Albums 


patent 


P First Album 




W. hello 




W Jim's your uncle. 




F Random 




E? Travels 



This group has 1 pending invitation 



Menage invitations 



Also there is still a pending invited membership for the group. Finally, member "dissident" can remove users 
that are no longer welcome: 

Remove Group 
Members 



Please select which members you would like to 
remove from group "sample group" 

patent 
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